Privacy Policy

1. Controller

The controller for BurnDial platform data is Kirina Solutions Oy, business ID 3209839-9. Burn Dial Ltd is listed as BurnDial's UK company contact for UK operations where applicable. A participating business may also be an independent controller for the customer relationship, advice, support, or service it provides through BurnDial.

• Contact: info@burndial.com
• Address: Kirina Solutions Oy, Nuottaniementie 7 A 1, 02230 Espoo, Finland

2. Personal Data We Collect

The data we collect depends on how you use BurnDial.

• Customer data: phone number, optional email, selected business or creator, wallet balance, payment status, receipts, support messages, and access tokens used to keep the wallet session secure.
• Call metadata: call IDs, service number, creator or business, timestamps, connection status, duration, billing amount, route type, and technical diagnostics. BurnDial does not record call audio unless this is clearly disclosed before recording.
• Payment data: Stripe customer ID, PaymentIntent ID, payment method type, card last four digits, tokenized wallet or card reference where available, extension capability, amounts, currency, refunds, chargebacks, and related metadata. Full card numbers are handled by Stripe, not BurnDial.
• Business and creator data: company name, company ID, owner name, owner email, owner phone, profile details, pricing, availability, service numbers, business currency, Stripe Connect onboarding status, payout and ledger data, and support communications.
• Technical data: IP address, device/browser information, cookies, logs, approximate country from request headers, security events, and analytics needed to operate and improve the service.

3. Why We Use Personal Data

• To create and manage customer wallet balance and call credit.
• To process payments, refunds, chargebacks, receipts, and saved-card call extensions.
• To connect calls through Twilio and show call status, history, and dashboards.
• To verify phone numbers, prevent unauthorized wallet access, fraud, and abuse.
• To provide customer support and resolve billing or technical issues.
• To show relevant service provider information to customers in legal, checkout, receipt, and support contexts.
• To meet legal, tax, accounting, security, and regulatory obligations.
• To improve product reliability, diagnose errors, and measure service performance.

4. Legal Bases

We process personal data under the legal bases that apply to the specific activity, including contract performance, legitimate interests, legal obligations, and consent where required. Consent is used, for example, when a customer chooses to save or reuse a card for eligible future in-call extensions.

5. Sharing Personal Data

We do not sell personal data. We share data only when needed to run BurnDial, comply with law, or resolve disputes.

• Stripe for payment processing, saved payment methods, refunds, chargebacks, fraud checks, and Connect payouts.
• Twilio for phone calls, WebRTC calling, SMS verification, call routing, and telecom diagnostics.
• Supabase and hosting providers for database, authentication, storage, logs, and application hosting.
• Participating businesses and creators for call handling, receipts, dashboards, customer support, and service delivery.
• Professional advisors, authorities, banks, card networks, or dispute processors when needed for legal, tax, accounting, fraud, or chargeback matters.

6. International Transfers

Some providers may process data outside Finland, the EU, EEA, or the UK. Where required, transfers are protected through appropriate safeguards such as standard contractual clauses, provider data processing terms, or other lawful transfer mechanisms.

7. Retention

We keep personal data only as long as needed for the purposes described in this Policy. Customer wallet balance expires six months after the latest successful top-up for that business unless a new top-up refreshes the balance validity. Payment, call, ledger, tax, accounting, support, fraud, and dispute records may be kept longer where necessary to comply with law, resolve chargebacks, prove transactions, or protect legal rights.

8. Cookies and Similar Technologies

BurnDial uses essential cookies and similar technologies for authentication, locale, payment return flows, customer wallet access, security, and embedded widget operation. We may also use limited analytics to understand performance and reliability. Browser settings may block some cookies, but this can affect payment return flows, embedded wallet access, and login sessions.

9. Your Rights

Depending on your location, you may have the right to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also withdraw consent where processing is based on consent.

• Send privacy requests to info@burndial.com.
• We may need to verify your identity before acting on a request.
• You can complain to your local data protection authority, including the Finnish Data Protection Ombudsman or the UK Information Commissioner where applicable.

10. Security

We use technical and organizational measures intended to protect personal data, including access controls, provider security controls, and limited access to sensitive operational data. No online or telecom system can be guaranteed to be completely secure.

11. Children

BurnDial is not intended for children. Customers must be at least 18 years old, or the age of majority required in their country if higher, to buy call credit or use paid call services through BurnDial.

12. Changes

We may update this Privacy Policy as BurnDial changes. The latest version is published on this page.